v9.5.4

projectdiscovery/nuclei-templatesv9.5.4Jul 2, 2023by princechaddha
AI Summary

Adds 51 new templates covering RCEs in Hikvision and KKFileView, as well as Node.js vulnerabilities.
Key Highlights

Hikvision IVMS file upload RCE
KKFileView SSRF
Multiple Node.js path traversal and overwrite vulnerabilities
New Features

File upload RCE detection
SSRF detection
Node.js vulnerability detection
Full Release Notes

## What's Changed

### New Templates Added : `51`
### New CVEs Added: `26`

- http/cves/2023/CVE-2023-35844.yaml by @dwisiswant0 🔥
- http/cves/2023/CVE-2023-35843.yaml by @dwisiswant0
- http/cves/2023/CVE-2023-34843.yaml by @DhiyaneshDk
- http/cves/2023/CVE-2023-34659.yaml by @ritikchaddha
- http/cves/2023/CVE-2023-34599.yaml by @ritikchaddha
- http/cves/2023/CVE-2023-34598.yaml by @DhiyaneshDk
- http/cves/2023/CVE-2023-34537.yaml by @Harsh
- http/cves/2023/CVE-2023-33510.yaml by @DhiyaneshDK
- http/cves/2023/CVE-2023-31548.yaml by @Harsh
- http/cves/2023/CVE-2023-30019.yaml by @DhiyaneshDK
- http/cves/2023/CVE-2023-27372.yaml by @DhiyaneshDK,@nuts7 🔥
- http/cves/2023/CVE-2023-26843.yaml by @Harsh
- http/cves/2023/CVE-2023-26842.yaml by @Harsh
- http/cves/2023/CVE-2023-25346.yaml by @Harsh
- http/cves/2023/CVE-2023-24488.yaml by @johnk3r 🔥
- http/cves/2023/CVE-2023-20889.yaml by @iamnoooob,@rootxharsh,@pdresearch
- http/cves/2023/CVE-2023-20888.yaml by @iamnoooob,@rootxharsh,@pdresearch
- http/cves/2023/CVE-2023-1496.yaml by @pdteam
- http/cves/2023/CVE-2023-1454.yaml by @DhiyaneshDK 🔥
- http/cves/2023/CVE-2023-0563.yaml by @Harsh
- http/cves/2023/CVE-2023-0562.yaml by @Harsh
- http/cves/2023/CVE-2023-0527.yaml by @Harsh
- http/cves/2023/CVE-2023-0126.yaml by @tess
- http/cves/2022/CVE-2022-40022.yaml by @DhiyaneshDK
- http/cves/2021/CVE-2021-46704.yaml by @DhiyaneshDK
- http/cves/2012/CVE-2012-6499.yaml by @ctflearner
- http/cnvd/2020/CNVD-2020-63964.yaml by @brucelsone
- http/vulnerabilities/hikvision-ivms-file-upload-rce.yaml by @brucelsone
- http/vulnerabilities/kkfileview-ssrf.yaml by @Arm!tage
- http/vulnerabilities/vbulletin/arcade-php-sqli.yaml by @MaStErChO
- http/misconfiguration/codeigniter-errorpage.yaml by @j4vaovo
- http/misconfiguration/genieacs-default-jwt.yaml by @DhiyaneshDK,@pussycat0x
- http/misconfiguration/grav-register-admin.yaml by @DhiyaneshDk
- http/misconfiguration/installer/spip-install.yaml by @DhiyaneshDK
- http/misconfiguration/odoo-unprotected-database.yaml by @pdteam
- network/enumeration/psql-user-enum.yaml by @pussycat0x
- network/misconfig/unauth-psql.yaml by @pussycat0x
- http/exposed-panels/axxon-client-panel.yaml by @irshadahamed
- http/exposed-panels/jsherp-boot-panel.yaml by @DhiyaneshDk
- http/exposed-panels/openbullet2-panel.yaml by @MaStErChO
- http/exposed-panels/syncserver-panel.yaml by @DhiyaneshDk
- http/exposed-panels/wd-mycloud-panel.yaml by @DhiyaneshDk
- http/exposures/configs/aws-config.yaml by @m4lwhere
- http/exposures/configs/aws-credentials.yaml by @m4lwhere
- http/technologies/wordpress/plugins/wp-rollback.yaml by @ricardomaia
- file/nodejs/admzip-path-overwrite.yaml by @me_dheeraj (https://twitter.com/Dheerajmadhukar)
- file/nodejs/express-lfr.yaml by @me_dheeraj (https://twitter.com/Dheerajmadhukar)
- file/nodejs/generic-path-traversal.yaml by @me_dheeraj (https://twitter.com/Dheerajmadhukar)
- file/nodejs/tar-path-overwrite.yaml by @me_dheeraj (https://twitter.com/Dheerajmadhukar)
- file/nodejs/xss-serialize-javascript.yaml by @me_dheeraj (https://twitter.com/Dheerajmadhukar)
- file/nodejs/zip-path-overwrite.yaml by @me_dheeraj (https://twitter.com/Dheerajmadhukar)

## New Contributors
* @m4lwhere made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7272
* @harsh2403 made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7530
* @vershinind made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7232

**Full Changelog**: https://github.com/projectdiscovery/nuclei-templates/compare/v9.5.3...v9.5.4